ShinyHunters breached Instructure's network, stealing 3.65TB of data and 275 million records from its Canvas learning management system. The group exploited an unspecified vulnerability in the Free-for-Teacher environment and later defaced login portals to extort the company, which ultimately paid a ransom to prevent a data leak.
Initial Access
Support Ticket Vulnerability
confirmed
ShinyHunters exploited an unspecified vulnerability related to 'support tickets' within Instructure's Free-for-Teacher environment to gain initial access to the network.
Defender cut points
Implement robust vulnerability management and secure coding practices for web applications, especially those handling support tickets.Conduct regular security audits and penetration testing on all public-facing applications.
